ART: Forbid the zygote to load code outside of system

Protect the window between runtime creation and forking.

Bug: 129454856
Test: m test-art-host
Test: Device boots
Test: manual
Change-Id: I6108b4196235cb2a2ede52e9d9e3450afe78f90e